| Package | Affected versions | Patched versions |
|---|---|---|
| decidim | ≥ 0.28.0.rc1, < 0.28.1< 0.27.6 | 0.28.10.27.6 |
The pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter per_page.
Not available
Not available
OWASP ASVS v4.0.3-5.1.3
This issue was discovered in a security audit organized by the mitgestalten Partizipationsbüro and funded by netidee against Decidim done during April 2024. The security audit was implemented by AIT Austrian Institute of Technology GmbH,
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free